Browse CVEs

HIGH 7.8 CVE-2019-2134 In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local… Android Mitigation only Fix from $1,9502019-08-20 MEDIUM 6.5 CVE-2019-14973 _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavio… Debian Linux after 4.0.10 Fix from $1,6002019-08-14 MEDIUM 6.5 CVE-2019-14982 In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a buf… Exiv2 0.27.2+ Fix from $1,6002019-08-12 CRITICAL 9.8 CVE-2015-5297 An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit thi… Pixman 0.32.8+ Fix from $2,3002019-07-31 HIGH 7.5 CVE-2019-14459 nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order t… Debian Linux after 1.6.17 Fix from $1,9502019-07-31 HIGH 8.8 CVE-2019-5059 An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can ca… Sdl2 Image Mitigation only Fix from $1,9502019-07-31 HIGH 8.8 CVE-2019-5060 An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4. A specially crafted XPM image can cause a… Sdl2 Image No fix yet Fix from $1,9502019-07-31 HIGH 7.8 CVE-2019-10142 A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed… Linux Kernel 5.0.17+ Fix from $1,9502019-07-30 MEDIUM 5.5 CVE-2019-14444 apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_p… Ubuntu Linux Patch available Fix from $1,6002019-07-30 HIGH 7.5 CVE-2019-13126 An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabl… Nats Server 2.0.2+ Fix from $1,9502019-07-29 MEDIUM 5.5 CVE-2019-14295 An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a ske… Upx Patch available Fix from $1,6002019-07-27 HIGH 7.8 CVE-2019-14288 An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per li… Xpdfreader No fix yet Fix from $1,9502019-07-27 MEDIUM 5.5 CVE-2019-14289 An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes … Xpdfreader No fix yet Fix from $1,6002019-07-27 MEDIUM 6.8 CVE-2019-14283 In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer ov… Linux Kernel 5.2.3+ Fix from $1,6002019-07-26 CRITICAL 9.8 CVE-2019-2309 While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. in Snapdr… Mdm9150 Firmware Patch available Fix from $2,3002019-07-25 MEDIUM 5.5 CVE-2019-14250 An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a ze… Ubuntu Linux No fix yet Fix from $1,6002019-07-24 MEDIUM 5.5 CVE-2019-12552 In SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could allow an attacker to cause a denial of service. 010 Editor No fix yet Fix from $1,6002019-07-22 MEDIUM 6.5 CVE-2019-9959 The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereb… Debian Linux after 0.78.0 Fix from $1,6002019-07-22 MEDIUM 6.5 CVE-2019-1010065 The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfs_dent.c:237.… Fedora after 4.6.0 Fix from $1,6002019-07-18 HIGH 8.1 CVE-2019-13115EPSS 12% In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-b… Debian Linux 1.9.0+ Fix from $1,9502019-07-16 CRITICAL 9.8 CVE-2019-1010296 Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kernel). The component … Op Tee after 3.3.0 Fix from $2,3002019-07-15 CRITICAL 9.8 CVE-2019-1010297 Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) context. The component … Op Tee after 3.3.0 Fix from $2,3002019-07-15 CRITICAL 9.8 CVE-2019-1010298 Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The compon… Op Tee after 3.3.0 Fix from $2,3002019-07-15 HIGH 7.8 CVE-2019-1010006 Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attac… Ubuntu Linux No fix yet Fix from $1,9502019-07-15 MEDIUM 5.5 CVE-2019-13590 An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition … Sound Exchange No fix yet Fix from $1,6002019-07-14 HIGH 8.8 CVE-2019-5052 An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted file can cause an integer overf… Debian Linux No fix yet Fix from $1,9502019-07-03 HIGH 7.8 CVE-2019-13136 ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. Imagemagick 7.0.8-50+ Fix from $1,9502019-07-01 MEDIUM 6.5 CVE-2019-13109 An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage:… Fedora after 0.27.1 Fix from $1,6002019-06-30 MEDIUM 6.5 CVE-2019-13110 A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSE… Fedora after 0.27.1 Fix from $1,6002019-06-30 MEDIUM 5.5 CVE-2019-13111 A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by… Fedora after 0.27.1 Fix from $1,6002019-06-30